security1 distinct publisher
A manifest edit, not a code edit: North Korea backdoored three Rust crates via typosquat
Wiz says the crates.io compromise executed at build time, so reviewing the library source would have caught nothing. Cargo did the rest.
Publishers:infosecurity-magazine.com
Reality
- Evidence46
- Adoption71
- Hype gap+22
- Incentives68
- Confidence48